security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2025-01-22 14:57:02 +01:00
Code Activity

gpg: Minor robustness fix.

Browse Source 
* g10/parse-packet.c (mpi_read_detect_0_removal): Protect agains
failed gcry_mpi_scan.
--

Fixes-commit: 3fcef7371480cce392d690897d42955f1b19c12a
This commit is contained in:
Werner Koch 2022-05-05 14:02:02 +02:00
parent 06e82e997a
commit 36a5509e11
No known key found for this signature in database
GPG Key ID: E3FDFF218E45B72B
1 changed files with 9 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
g10/parse-packet.c
View File

@ -252,6 +252,8 @@ mpi_read_detect_0_removal (iobuf_t inp, unsigned int *ret_nread, int secure,
a = NULL; a = NULL;
/* Possibly, it has leading zeros. */ /* Possibly, it has leading zeros. */
if (a)
{
nbits1 = gcry_mpi_get_nbits (a); nbits1 = gcry_mpi_get_nbits (a);
if (nbits > nbits1) if (nbits > nbits1)
{ {
@ -260,6 +262,7 @@ mpi_read_detect_0_removal (iobuf_t inp, unsigned int *ret_nread, int secure,
*r_csum_tweak += (nbits1 >> 8); *r_csum_tweak += (nbits1 >> 8);
*r_csum_tweak += (nbits1 & 0xff); *r_csum_tweak += (nbits1 & 0xff);
} }
}
*ret_nread = nread; *ret_nread = nread;
gcry_free(buf); gcry_free(buf);